CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-50471

CVE-2026-50471 is a heap-based buffer overflow in Windows NTFS that could allow a local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components as described in multiple sources (NVD/NCSC/CIRCL) and is being addressed by Microsoft with published updates (e.g., KB arti...

CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-50436 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-50436

CVE-2026-50436 is a Windows Kernel local privilege escalation caused by a use-after-free vulnerability. Updates from Microsoft (e.g., KB5095051) address the issue; the CVSS vector indicates local access, low attack complexity, low privileges required, with high impact on confidentiality, integrit...

CVE-2026-50436 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-50437

CVE-2026-50437 describes an out-of-bounds read in Windows DWM Core Library that could allow an authenticated local attacker to disclose information. Public docs identify the affected component (Windows DWM Core Library) and the impact (local information disclosure) with a CVSSv3.1 base score of 5...

CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2026-50352

CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...

CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

...

CVE-2026-50445

CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...

CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-50344

CVE-2026-50344 corresponds to an Windows OLE elevation-of-privilege vulnerability. Description from sources: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.” Exploitation details are not provided beyond that this is a local privilege escalation ...